The Simplest Vista Virus 3.0
Written by Gordon Fecyk, 6/30/2006
IN THE USER ACCOUNT CONTROL BLOG Microsoft developers and concerned users
I'm reminded of the early days of Sun Microsystems' Java, where Java 1.0 imposed tight security restrictions on "unsigned" applications and browser applets. Java 1.1 omitted some of this security after some user and developer furor.
One of the UAC Blog readers invented "The Simplest Vista Virus." Its design goes like this:
-blacken the screen
Basically, defeating Vista's improved security involves defeating User Account Control. Once you have admin, you have the computer. After Aaron Margosis responded that this wasn't possible, I took "version 2.0" and "version 2.1" a couple steps further:
-blacken the screen
This last design of The Simplest Vista Virus comes from Yahoo! Messenger on MacOS X, which asks the MacOS user for the root password using its own dialog box instead of whatever program interface Apple provides for requiring root access. I guess Yahoo! wants the root password so it can install updates? I'm not sure, and neither is the MacOS X community:
I have seen Mac OS X installation programs - even for Internet programs like Yahoo Messenger - that don't even put up a standard dialog box when requesting the admin password. I know that these dialog boxes belong to some third party installer, and I have to trust that it will play nice with my admin password. Some programs even require that the computer be connected to the Internet during the install. You don't even get to see what you are installing before giving permission to install.
If Yahoo! can do this on MacOS X, what stops them from doing it on Vista?
How, then, do we get our virus working?
With the objective of defeating User Account Control still clear, I present to the public, The Simplest Vista Virus 3.0.
"Choose another system, then." No, thank-you. Security prompts are the norm on MacOS X, yet there's already a piece of malware that specifically targets that feature on MacOS. All because developers, and users, don't like security.
On one hand, Microsoft customers clamor for a more secure version of Microsoft products. On the other hand, customers complain that more security gets in the way. If Microsoft made cars, drivers would complain about the seat belts.
Recently Edited Categories:
All trademarks are property of their respective owners.